Command sent. Did the device actually execute it?
How to design device control that distinguishes acceptance from motion, recovers the result after a lost response, and shows what is known after a restart.
Notes
Electronics, software and engineering decisions.
An SBOM is only the beginning: does a vulnerable library mean a vulnerable product?
From a scanner match to a defensible firmware assessment: SBOM, vulnerability conditions, evidence, CycloneDX VEX, and changes that invalidate earlier conclusions.
The system is slow. Which part is responsible?
Locate delay between a sensor and its dashboard: three equally slow flows, clocks, traces, queues and a reproducible comparison of mean latency and p99.
A 16-bit ADC on the label. How much information reaches the measurement?
16 register bits versus useful measurement: histograms, averaging, reference error, synthetic FFT, SINAD, and ENOB with explicit amplitude correction.
RAG at work: why document access does not guarantee a good answer
Evaluate a RAG assistant against a concrete task: product revisions, bulletins, permissions, answer completeness and citations in a reproducible teaching example.
Before choosing controls: threat modelling across device, application and cloud
Threat modeling across device, app, cloud, and service: identity, revoked access, updates, negative tests, and residual risk.
